Skip to Main Content
PCMag editors select and review products independently. If you buy through affiliate links, we may earn commissions, which help support our testing.

Beware: Google.com Is Not Always Google.com

A simple URL tweak using a Latin character redirects unwitting users to a scam site.

By Stephanie Mlot
November 22, 2016
Google Logo

Google Analytics is the latest target for cyber-spammers.

Canadian firm Analytics Edge early this month spotted a fake search engine appearing on Google's data service as "secret.?oogle.com."

But don't confuse the familiar-looking link—which was accompanied by a message to "Vote for Trump"—with the authentic site.

Navigate to the address and you'll be redirected to "xn--oogle-wmc.com," which, in turns, brings you to a lengthy URL featuring the lyrics to Pink Floyd's "Money."

Based on a screenshot published by BGR—which was brave enough to click on the spammy link—the bizarre site offers instructions for use, as well as a message from Russian scammer Vitaly Popov, congratulating "all Americans" and President-elect Donald Trump.

Demonstrating how easy it is for hackers to register counterfeit domain names in an attempt to phish for personal data, Popov tweaked the Google.com URL ever so slightly: the leading "G" is not the traditional capital letter, but instead a Latin Letter Small Capital G—the character Unicode 0262.

With only a quick glance, the change is nearly indistinguishable. It's unlikely, though, that Popov's spurious site will do any harm to visitors; according to BGR, the Russian native considers his scams "creative marketing."

Still, folks should stay away from ?oogle.com (with a little "G"), and remember to keep a close eye on other URLs—particularly those connected to financial institutions or social networks—in the future. Similar letter tweaks could lead to more harmful sites.

Google did not immediately respond to PCMag's request for comment.

As Analytics Edge points out, international characters are slowly creeping into domain names, in an attempt to allow folks to create URLs in their native language. Some enterprising cybercrooks, however, are using the feature for bad instead of good.

"Expect to see a sharp increase in phishing until the general public catches on," company founder Mike Sullivan wrote in a recent blog entry.

Like What You're Reading?

Sign up for SecurityWatch newsletter for our top privacy and security stories delivered right to your inbox.

This newsletter may contain advertising, deals, or affiliate links. Subscribing to a newsletter indicates your consent to our Terms of Use and Privacy Policy. You may unsubscribe from the newsletters at any time.


Thanks for signing up!

Your subscription has been confirmed. Keep an eye on your inbox!

Sign up for other newsletters

TRENDING

About Stephanie Mlot

Contributor

Stephanie Mlot

B.A. in Journalism & Public Relations with minor in Communications Media from Indiana University of Pennsylvania (IUP)

Reporter at The Frederick News-Post (2008-2012)

Reporter for PCMag and Geek.com (RIP) (2012-present)

Read Stephanie's full bio

Read the latest from Stephanie Mlot